ClamAV vs herdProtect

ClamAV is a free, open-source antivirus engine for email and web scanning and endpoint security tasks. It provides a multi-threaded daemon, a command-line scanner and a tool for automated virus database updates. The database receives updates multiple times per day, and the updater supports scripted updates and digital signatures. ClamAV scans standard mail formats and many archive, executable and document formats, including MS Office, HTML, RTF and PDF. A Milter interface supports Sendmail. On modern Linux versions, ClamOnAcc can scan files when accessed, with an option to block access until scanning finishes. Signed signature databases limit execution to trusted definitions. The project lists GNU/Linux, FreeBSD, macOS and Windows as regularly tested platforms, and official Docker images are available for Alpine Linux and Debian Linux. ClamAV is an engine and associated tools, not a traditional antivirus or endpoint security suite. Recommended minimum resources are 3 GiB RAM, a 2.0 GHz CPU and 5 GiB of free disk space. The project does not guarantee extraction of every version or variant of supported formats.

herdProtect is a free Windows desktop scanner intended to provide a second opinion alongside an existing antivirus product. Its cloud scanner uses 68 anti-malware engines, checks active files and auto-start locations, and can send unknown files for remote analysis. The site says that analysis of unknown files takes 5 to 30 minutes. Scans are on demand, with no real-time protection and no scheduled-scan option. Detected threats can be quarantined, but remediation is manual. Reports and other communications between the computer and herdProtect servers are encrypted. The service does not accept one-off or batch file uploads for analysis. The maker says downloads are not currently being distributed and invites interested users to email for a waiting list. Use is intended for personal, non-commercial purposes unless otherwise specified. Support is limited and listed at [email protected].